You'll noticeTier: how much it should matter to you
2Useful: my rating, 1 to 5
3Signal: worth watching, 1 to 5
Cross-Session MessagingArea: what it touches
ImprovementsKind: in v2.1.236,
ImprovementsSection of the release
What
When one Claude Code session sends to another over a local socket, it now refuses to follow a symlinked reply target, and on macOS and Linux can compare the process ID on the other end of the connection against the one it expected, aborting the write on a mismatch or an unreadable ID.
Details
The process-ID check only applies when the caller supplies an expected ID; it is skipped on Windows.
Startup socket bind time is now recorded, along with whether the bind succeeded.
Evidence
Refusing to send: connected endpoint is not the expected process
Strings lifted out of the shipped bundle, so the claim above can be checked against them.
